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REMARKS 

In this Response, the specification and claims 1, 2, 4-13, 17-20, 22-31, 34, 35 and 
37 are amended. The specification is amended to delete browser-executable code and 
to correct minor typographical errors. Accordingly, claims 1-37 are pending in the 
present application. Applicants respectfully request reconsideration of the application in 
view of the above amendments and remarks made herein. 

I. Specification Objections 

The specification has been objected to for the reasons set forth on page 2 of the 
Office Action. 

The "Background of the Invention" section of the specification is amended to 
delete the browser-executable code. Withdrawal of the instant objection is respectfully 
requested. 

II. Rejections Under 35 U.S.C. S 102 

Claims 1-37 stand rejected under 35 U.S.C. § 102(e) as being anticipated by as 
being anticipated by U.S. Patent No. 6,275,824, issued to O'Flaherty et al. (hereinafter 
"O'Flaherty) for the reasons set forth on pages 3-9 of the Office Action. 

With regard to claims 1 and 19, Applicants respectfully submit that O'Flaherty does 
not teach "a requester privacy statement for each of the respective data-subject data 
requested, wherein the requester privacy statement describes how each of the requested 
data-subject data will be used by the requester; and a release process that compares the 
requester privacy statement to the subject constraints and releases the data-subject data 
in a response message to the requester only if the subject constraints are satisfied", as 
recited in claim 1 , or "a requester privacy statement for each of the respective data- 
subject data, wherein the requester privacy statement describes how each of the 
requested data-subject data will be used by the requester; comparing the requester 
privacy statement to the subject constraints", as recited in claim 19. 
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O'Flaherty (Abstract) discloses: "a database management system, for storing and 
retrieving data from a plurality of database tables wherein the data in the database tables 
is controllably accessible according to privacy parameters stored In the database table". 
O'Flaherty (col. 4, lines 36-41 ) discloses: "Virtually all access to the data stored in the 
extended database 106 is provided solely through the dataview suite 108. Thus, business 
applications 110 and third party applications 112 have access only to such data as 
permitted by the database view provided." O'Flaherty (col. 13, lines 55-60) discloses: 
"When a requesting entity requests access to the data, access is provided solely through 
the database management system interface 109 via the dataview suite 108, the macro 
suite 1 1 1 , or both, thus assuring that the data is provided in accordance with the data 
source's personal privacy parameters. O'Flaherty {co\. 13, lines 64-66) discloses that "a 
dataview is provided in accordance with verified identity of the requesting entity." 

That is, O'Flaherty merely discloses a database management system that controls 
access to data stored in a database, wherein privacy control is managed using database 
views which block the private data from being released according to privacy parameters 
stored in the database tables and the verified identity of the requesting entity. 

The requesting entity of O'Flaherty does not provide a requester privacy statement 
for each of the respective data-subiect data requested, wherein the requester privacv 
statement describes how each of the requested data-subiect data will be used bv the 
requester , as claimed in claims 1 and 19, much less compare the requester privacv 
statement to the subject constraint , as essentially claimed in claims 1 and 19. O'Flaherty 
fails to teach what if any information is provided for purposes of verifying identify, much 
less that the requesting entity provides a requester privacv statement which describes 
how each of the requested data-subiect data will be used bv the requester . 

Thus, O'Flaherty clearly does not teach "a requester privacy statement for each of 
the respective data-subject data requested, wherein the requester privacy statement 
describes how each of the requested data-subject data will be used by the requester; and 
a release process that compares the requester privacy statement to the subject 
constraints and releases the data-subject data in a response message to the requester 
only if the subject constraints are satisfied", as recited in claim 1 , and "a requester privacy 
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statement for each of the respective data-subject data, wherein the requester privacy 
statement describes how each of the requested data-subject data will be used by the 
requester; comparing the requester privacy statement to the subject constraints", as 
recited in claim 19. 

Therefore, for at least the above reasons, O'Flaherty does not anticipate claims 1 
and 19. Applicants respectfully submit that inasmuch as claims 2-18 are dependent on 
claim 1 , and claims 20-37 are dependent on claim 19, and claims 1 and 19 are patentable 
over Rostoker, claims 2-18 and 20-37 are patentable as dependent on patentable 
independent claims. 

Withdrawal of the rejections under 35 U.S.C. § 102(e) is respectfully requested. 
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CONCLUSION 



In view of the foregoing, it is believed that all claims now pending patentably 
define the subject invention over the prior art of record and are in condition for 
allowance. Issuance of a Notice of Allowance is respectfully requested. 



Dated: December 7. 2007 



F. CHAU & ASSOCIATES, LLC 
130 Woodbury Road 
Woodbury, New York 11797 
Tel: (516)-692-8888 
Fax: (516)-692-8889 




Respectfully submitted. 



Reg. No. 54,183 
Attorney for Applicants 
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